Pfsense/ one Nic for munity VLAN
-
Hey guys,
I'm very new to Vlanning so help with this would be much appreciated, I have here a 6port Smoothwall, its not running anything so changes can be made.
we are using NIC1/WAN, this needs te able to see for example vlan2 (and for other networks but not yet), vlan 3, vlan4)
How would I set this up?My thought on this is that just adding the traffic tags say vLan4 for NIC3, same for the others E.g:
Nic3 > vLan2 > switch port configured for vlan2
Nic4 > vLan3 > switch port configured for vlan3
Nic5 > vLan4 > switch port configured for vlan4
Nic6 > vLan5 > switch port configured for vlan5
WAN switch port set up to see all 4 vlans? -
One physical interface (as long as it supports VLAN tagging) can be used for all your VLANs. You don't need one NIC for each VLAN. Each VLAN will then become a virtual interface on which you will place firewall rules. These rules can block/allow traffic to other interfaces/virtual interfaces. Your WAN interface will not need to know about the VLANs.
-
Thank you for putting your time into replying to me. now i understand.
This is now working as expected from the customer's point of view. -
@bhjitsense I have the concept of 1 NIC and all VLANS assigned to that NIC pfsense. How do I add the default VLAN 1 that is untagged. My VLANS can talk to each other via pfsense but the untagged default, can't get to it.
-
@penguin-nut said in Pfsense/ one Nic for munity VLAN:
I have the concept of 1 NIC and all VLANS assigned to that NIC pfsense. How do I add the default VLAN 1 that is untagged. My VLANS can talk to each other via pfsense but the untagged default, can't get to it.
The bare interface, without VLANs is untagged. It is also often called "VLAN1", even though it doesn't have a tag.
-
@jknott Figured out the VLAN stuff, all set. Thanks for responding.